Pi-hole not blocking ads on some sites

I am having a similar problem. Sites like NYTimes.com and Yahoo.com still have big banner across the top of their pages. Any help would be appreciated.

https://tricorder.pi-hole.net/nyyJPg0O/

Your debug log shows that Pi-hole is working properly, is correctly assigned as the only DNS server for the LAN, and is receiving a small amount of traffic.

This is the report for the past 24 hours (or since you installed Pi-hole, whichever is the shorter time interval):

   [2023-12-06 21:56:08.711 849M] Imported 308 queries from the long-term database
   [2023-12-06 21:56:08.711 849M]  -> Total DNS queries: 308
   [2023-12-06 21:56:08.711 849M]  -> Cached DNS queries: 138
   [2023-12-06 21:56:08.711 849M]  -> Forwarded DNS queries: 133
   [2023-12-06 21:56:08.711 849M]  -> Blocked DNS queries: 33
   [2023-12-06 21:56:08.711 849M]  -> Unknown DNS queries: 2
   [2023-12-06 21:56:08.711 849M]  -> Unique domains: 46
   [2023-12-06 21:56:08.711 849M]  -> Unique clients: 13
   [2023-12-06 21:56:08.711 849M]  -> Known forward destinations: 3

If you see ads on some sites (or some clients), there are several possibilities:

  1. The ads are coming from the same domains as the content. With a domain blocker such as Pi-hole, you cannot block these ads without blocking the content.

  2. The client is using a DNS server other than Pi-hole. This could be due to a setting on the client, use of a VPN service from the client, a router providing an IPv6 DNS server, etc.

  3. The browser is using a DNS other than Pi-hole. Firefox DNS over HTTPS, Apple iCloud Private Relay, etc.

  4. Software on the client (i.e. AVAST in Windows).

Specifically to your reported sites, when I visit either of these using only Pi-hole as a filter, I see no banners on the top. This establishes that the ads are not from the same domains as the content.

From the client on which you are running the browser where you see the ads, and from the command prompt or terminal on that client (not via ssh to the Pi terminal), what are the outputs of the following:

nslookup pi.hole

nslookup ifiderrienctea.site 192.168.1.9

Use these tools to determine the domain that is serving the ad:

When I loaded the NY Times site using Chrome with no ad-blocker and clean cache, here are the domains that were requested:

a.et.nytimes.com
a.nytimes.com
accounts.google.com
als-svc.nytimes.com
fastlane.rubiconproject.com
g1.nyt.com
hbopenbid.pubmatic.com
ib.adnxs.com
mwcm.nytimes.com
nytimes.com
prebid.media.net
purr.nytimes.com
rtb.openx.net
samizdat-graphql.nytimes.com
securepubads.g.doubleclick.net
static01.nyt.com
tlx.3lift.com
vp.nyt.com
www.nytimes.com

Pi-hole blocked the following domains during this time:

Dec  6 22:39:51: gravity blocked a.et.nytimes.com is 0.0.0.0
Dec  6 22:39:51: gravity blocked als-svc.nytimes.com is 0.0.0.0
Dec  6 22:39:51: gravity blocked www.datadoghq-browser-agent.com is 0.0.0.0
Dec  6 22:39:51: gravity blocked www.googletagmanager.com is 0.0.0.0
Dec  6 22:39:51: gravity blocked rumcdn.geoedge.be is 0.0.0.0
Dec  6 22:39:51: gravity blocked c.amazon-adsystem.com is 0.0.0.0
Dec  6 22:39:51: gravity blocked securepubads.g.doubleclick.net is 0.0.0.0
Dec  6 22:39:52: gravity blocked tlx.3lift.com is 0.0.0.0
Dec  6 22:39:52: gravity blocked htlb.casalemedia.com is 0.0.0.0
Dec  6 22:39:52: gravity blocked prebid.media.net is 0.0.0.0
Dec  6 22:39:52: gravity blocked ib.adnxs.com is 0.0.0.0
Dec  6 22:39:52: gravity blocked hbopenbid.pubmatic.com is 0.0.0.0
Dec  6 22:39:52: gravity blocked rtb.openx.net is 0.0.0.0
Dec  6 22:39:52: gravity blocked fastlane.rubiconproject.com is 0.0.0.0
Dec  6 22:39:55: gravity blocked u.openx.net is 0.0.0.0
Dec  6 22:39:55: gravity blocked dsum.casalemedia.com is 0.0.0.0
Dec  6 22:39:55: gravity blocked image8.pubmatic.com is 0.0.0.0
Dec  6 22:39:55: gravity blocked eb2.3lift.com is 0.0.0.0

Provided for comparison with your own results.

1 Like

Thanks for your prompt response. I'll work through your suggestions.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.